github.com-laramies-theHarvester_-_2019-02-21_16-43-33
Item Preview
Share or Embed This Item
- Publication date
- 2019-02-21
E-mails, subdomains and names Harvester - OSINT
```
- *
- | || |_ _ /\ /__ _ _ _ | | _ _ *
- | | '_ \ / _ \ / // / _` | '\ \ / / _ \/ | _/ _ \ '| *
- | || | | | _/ / _ / (| | | \ V / _/_ \ || __/ | *
- _|| ||_| \/ // _,|| _/ _||/__|| *
- *
- theHarvester 3.0.6 v308 *
- Coded by Christian Martorella *
- Edge-Security Research *
- cmartorella@edge-security.com *
What is this?
theHarvester is a very simple, yet effective tool designed to be used in the early
stages of a penetration test. Use it for open source intelligence gathering and helping
to determine a company's external threat landscape on the internet. The tool gathers
emails, names, subdomains, IPs, and URLs using multiple public data sources that include:
Passive:
baidu: Baidu search engine
bing: Microsoft search engine - www.bing.com
bingapi: Microsoft search engine, through the API (Requires API key, see below.)
censys: Censys.io search engine
crtsh: Comodo Certificate search - www.crt.sh
cymon: Cymon.io search engine
dogpile: Dogpile search engine - www.dogpile.com
duckduckgo: DuckDuckGo search engine - www.duckduckgo.com
google: Google search engine (Optional Google dorking.) - www.google.com
googleCSE: Google custom search engine
google-certificates: Google Certificate Transparency report
hunter: Hunter search engine (Requires API key, see below.) - www.hunter.io
intelx: Intelx search engine (Requires API key, see below.) - www.intelx.io
linkedin: Google search engine, specific search for Linkedin users
netcraft: Netcraft Data Mining
securityTrails: Security Trails search engine, the world's largest repository
of historical DNS data (Requires API key, see below.) - www.securitytrails.comshodan: Shodan search engine, will search for ports and banners from discovered
hosts - www.shodanhq.comthreatcrowd: Open source threat intelligence - www.threatcrowd.org
trello: Search trello boards (Uses Google search.)
twitter: Twitter accounts related to a specific domain (Uses Google search.)
vhost: Bing virtual hosts search
virustotal: Virustotal.com domain search
yahoo: Yahoo search engine
all: currently a subset of all the most effective plugins
Active:
- DNS brute force: dictionary brute force enumeration
- DNS reverse lookup: reverse lookup of IP´s discovered in order to find hostnames
- DNS TDL expansion: TLD dictionary brute force enumeration
Modules that require an API key:
Add your keys to api-keys.yaml
- googleCSE: API key and CSE ID
- hunter: API key
- intelx: API key
- securityTrails: API key
- shodan: API key
Dependencies:
- Python 3.6
- python3 -m pip install -r requirements.txt
Changelog in 3.0:
- Subdomain takeover checks.
- Port scanning (basic).
- Improved DNS dictionary.
- Shodan DB search fixed.
- Result storage in Sqlite.
Comments, bugs, or requests?
cmartorella@edge-security.com
Main contributors:
Thanks:
- John Matherly - Shodan project
- Ahmed Aboul Ela - subdomain names dictionaries (big and small)
To restore the repository download the bundle
wget https://archive.org/download/github.com-laramies-theHarvester_-_2019-02-21_16-43-33/laramies-theHarvester_-_2019-02-21_16-43-33.bundle
and run: git clone laramies-theHarvester_-_2019-02-21_16-43-33.bundle
Source: https://github.com/laramies/theHarvester
Uploader: laramies
Upload date: 2019-02-21
- Addeddate
- 2019-02-21 19:17:56
- Identifier
- github.com-laramies-theHarvester_-_2019-02-21_16-43-33
- Originalurl
- https://github.com/laramies/theHarvester
- Pushed_date
- 2019-02-21 16:43:33
- Scanner
- Internet Archive Python library 1.8.1
- Uploaded_with
- iagitup - v1.6.2
- Year
- 2019
comment
Reviews
Subject: Great OSINT Tool
It has a very nice design and the modules can be used from other python scripts. That's why I was able to build this tool online at
https://www.nmmapper.com/kalitools/theharvester/email-harvester-tool/online/
356 Views
DOWNLOAD OPTIONS
IN COLLECTIONS
Github Mirror by Narabot The Vintage Software CollectionUploaded by narabot on